Static task
static1
Behavioral task
behavioral1
Sample
89696f700b4e5dc7893b90827026b66c83890686c714deab2c37d164db149201.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89696f700b4e5dc7893b90827026b66c83890686c714deab2c37d164db149201.exe
Resource
win10v2004-20220812-en
General
-
Target
89696f700b4e5dc7893b90827026b66c83890686c714deab2c37d164db149201
-
Size
512KB
-
MD5
370809ac00470f7b8d2d615903c31389
-
SHA1
d9a91355d32e56692fdc1accaaaca015bbc0dc64
-
SHA256
89696f700b4e5dc7893b90827026b66c83890686c714deab2c37d164db149201
-
SHA512
1b1b9308053465cda11aa2bf7bdc5dc7ae1be6d8e7a21e4c872f95ae76b00961890695eec4ead7c367438040189a79ad3361c7c49627a6421d7d6d5e81bc419a
-
SSDEEP
12288:M31Ycz1V6UstE3QYUB7jSPDGrKvumU51Klf:M31XH6Usy3LGj9ryuxcJ
Malware Config
Signatures
Files
-
89696f700b4e5dc7893b90827026b66c83890686c714deab2c37d164db149201.exe windows x86
c3e4c3dde3a9cd480b364d5183d620af
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessagePos
UnhookWindowsHookEx
ShowScrollBar
SetMessageExtraInfo
SetRectEmpty
SetThreadDesktop
CharUpperW
MonitorFromWindow
DrawAnimatedRects
MessageBoxExW
GetQueueStatus
OpenWindowStationA
ModifyMenuA
DialogBoxParamW
AppendMenuA
GetClipboardSequenceNumber
KillTimer
TileWindows
DdeSetUserHandle
EnumWindowStationsW
RegisterClassExA
LoadCursorFromFileA
MapVirtualKeyExA
ClipCursor
UnregisterClassW
CreateDesktopW
SetWindowTextA
DeleteMenu
GetScrollInfo
DestroyCursor
GetTabbedTextExtentW
LoadMenuIndirectA
GetSystemMenu
CharNextExA
CreateCaret
LoadBitmapA
IsCharUpperA
CreateWindowExA
MonitorFromPoint
SetMenu
RegisterClassA
OemKeyScan
comctl32
ImageList_BeginDrag
InitCommonControlsEx
ImageList_LoadImageA
ImageList_Create
ImageList_SetDragCursorImage
DrawStatusTextA
CreateStatusWindow
ImageList_GetImageInfo
ImageList_DrawEx
ImageList_GetBkColor
ImageList_SetFlags
ImageList_GetIcon
ImageList_SetFilter
DestroyPropertySheetPage
ImageList_DragMove
ImageList_GetImageCount
advapi32
RegQueryInfoKeyA
ReportEventA
RegRestoreKeyW
CryptDecrypt
CreateServiceA
CryptEnumProviderTypesA
comdlg32
PageSetupDlgA
ReplaceTextW
GetSaveFileNameW
ChooseFontW
wininet
CommitUrlCacheEntryA
InternetConfirmZoneCrossingW
SetUrlCacheConfigInfoA
SetUrlCacheGroupAttributeA
GetUrlCacheGroupAttributeW
GopherCreateLocatorW
kernel32
GetLocaleInfoA
CompareStringA
DeleteCriticalSection
GetSystemInfo
GetCPInfo
TlsSetValue
GetStdHandle
GetLastError
SetEnvironmentVariableA
HeapDestroy
LeaveCriticalSection
GetProcAddress
GetModuleFileNameA
WriteFile
GetOEMCP
GetCurrentThreadId
VirtualFree
FlushFileBuffers
MultiByteToWideChar
GetCurrentThread
SetStdHandle
GetStringTypeW
GetUserDefaultLCID
GetCommandLineA
ExitProcess
VirtualProtect
ConvertDefaultLocale
GetFullPathNameA
GetTimeZoneInformation
SetWaitableTimer
FreeEnvironmentStringsA
GetConsoleMode
UnhandledExceptionFilter
CompareStringW
EnumDateFormatsExA
EnumSystemLocalesA
GetLocaleInfoW
SetFilePointer
ReadFile
InitializeCriticalSection
GetTimeFormatA
LoadLibraryA
OpenMutexA
RtlUnwind
UnlockFileEx
GetFileAttributesExA
CreateMutexA
QueryPerformanceCounter
VirtualAlloc
GetDateFormatA
VirtualQuery
FreeEnvironmentStringsW
HeapReAlloc
CloseHandle
GetPrivateProfileSectionNamesW
GetStringTypeA
GetTickCount
GetModuleHandleA
HeapSize
GetCurrentProcess
GetCurrentProcessId
GetEnvironmentStrings
GetFileType
WideCharToMultiByte
SetLastError
HeapCreate
SetHandleCount
GetStartupInfoA
InterlockedExchange
IsBadWritePtr
HeapFree
IsValidCodePage
GetVersionExA
TlsAlloc
OpenFile
LCMapStringW
TlsFree
LocalAlloc
EnterCriticalSection
GetACP
HeapLock
GetSystemTimeAsFileTime
LCMapStringA
AddAtomW
TerminateProcess
IsValidLocale
HeapAlloc
GetThreadSelectorEntry
GetEnvironmentStringsW
TlsGetValue
GetProfileIntA
CreateDirectoryA
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ